nerdexam
F5

101 · Question #2

A site wishes to perform source address translation on packets arriving from the Internet for clients using some pools but not others. The determination is not based on the client's IP address, but on

The correct answer is A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select. On F5 BIG-IP, SNAT applicability can be controlled at the virtual server level, allowing administrators to enable SNAT globally and then selectively disable it on specific virtual servers tied to particular pools.

Section 2: F5 Solutions and Technology

Question

A site wishes to perform source address translation on packets arriving from the Internet for clients using some pools but not others. The determination is not based on the client's IP address, but on the pool they are load balanced to. What could best accomplish this goal.

Options

  • AA SNAT for all addresses could be defined, and then disable the SNAT processing for select
  • BThe decision to perform source address translation is always based on VLAN. Thus, the goal
  • CFor each virtual server, regardless their default load balancing pools, association with SNAT
  • DThe decision to perform source address translation is always based on a client's address (or

How the community answered

(25 responses)
  • A
    64% (16)
  • B
    12% (3)
  • C
    4% (1)
  • D
    20% (5)

Why each option

On F5 BIG-IP, SNAT applicability can be controlled at the virtual server level, allowing administrators to enable SNAT globally and then selectively disable it on specific virtual servers tied to particular pools.

AA SNAT for all addresses could be defined, and then disable the SNAT processing for selectCorrect

By defining a SNAT that encompasses all source addresses and then disabling SNAT processing on individual virtual servers, administrators can effectively make the source address translation decision pool-dependent rather than client-IP-dependent. Since each virtual server is associated with a default pool, enabling or disabling SNAT per virtual server achieves the goal of applying SNAT to some pools but not others without requiring client-address-based rules.

BThe decision to perform source address translation is always based on VLAN. Thus, the goal

SNAT processing is not restricted exclusively to VLAN-based decisions; it can be controlled at the virtual server level, so this goal is achievable and the statement is incorrect.

CFor each virtual server, regardless their default load balancing pools, association with SNAT

This option is incomplete and misleadingly implies virtual server-to-SNAT association is independent of pool assignment; the correct approach is a global SNAT with selective per-virtual-server disabling, not an unqualified per-virtual-server association.

DThe decision to perform source address translation is always based on a client's address (or

SNAT decisions are not always based solely on client address or range; BIG-IP supports virtual-server-level SNAT control, making pool-based determination possible.

Concept tested: F5 BIG-IP SNAT selective application per virtual server

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-basics/snat.html

Topics

#SNAT#source address translation#pool assignment#virtual server

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 101 Practice